How Can You Stay Safe?

The biggest thing you can do to avoid this particular scam is stay vigilant against any phishing emails. However, that’s easier said than done.

The FBI’s warning comes with a few technical tips for staying safe.

You can try to “create a conditional access policy to block device code flow for all users,” and you can figure out how to block authentication transfer policies, so that any users with unauthorized access can’t transfer their authentication between computers and mobile devices.

Finally, if you’ve already been hit, you can report the incident and help experts work to stop the evolving threat: Go file an online complaint with the Internet Crime Complaint Center (IC3) here if you’ve been impacted by the Kali365 phishing kit.